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TITLE OF THE INVENTION 

Multiplexing Control System and Multiplexing 
Method therefor 

5 FIELD OF THE INVENTION 

The present invention relates to a multiplexing 
control system and a multiplexing method therefor in 
which processes in a variety of plants such as an 
electric power generation plant and a chemical plant 
10 are controlled by a digital controllei: of such as a 
plurality of microcomputers via a process input /output 
unit. 

BACKGROUND OF THE INVENTION 

15 With regard to such as recirculation pump control 

in nuclear power generation plants ^ gas turbine 
control and steam turbine control in thermal power 
generation plants and controls in variety of plants 
such as chemical plants, a staible operation thereof is 

20 demanded in the world, therefore, protective functions 
of particularly high importance for enhancing 
reliability and safety of the plant control are 
constituted by hard wire circuits. However, in 
response to cost reduction requirement the hard wire 

25 circuits are these days being constituted by soft 
wares, however, in order to maintain reliability and 
safety, the soft wares are constituted in a triplex 
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structure . 

In a conventional triplex control system^ each 
process input /output unit is independently connected 
to each of three microcomputers in a redundant 
5 structure, and the system is constituted so that the 
output signals are selected at the outside thereof . 
Further, in order to simplify the external circuit, as 
disclosed, for example, in JP-A-5-241606 a method of 
forming the output signal by summing the three signals 

10 is proposed. 

Further, inputting/outputting of process 
variables and monitoring thereof in a multiplexed 
control system are performed through a separate 
provision of a microcomputer exclusive for the 

15 monitoring and an input/output hard interface unit^ 
In this instance, the input/output are performed via 
an input/output hard interface unit exclusive for 
input /output and monitoring other than a control use 
microcomputer and information is sent to all of the 

20 control use microcomputers via transmission, thereby, 
standardization of information is designed. 

Further, as disclosed in JP-A-08-106301 , 
processing units and a process input/output unit are 
connected via triplexed lines, and a circuit which 

25 determines connection of to which unit among the units 
and data use of in which line among the lines is 
incorporated within the process input/output unit. 
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thereby, a provision of a common process input /output 
unit other than the triplexed process input /output 
unit can be achieved to realize a cost reduction of 
the system. 

5 

DISCLOSURE OF THE INVENTION 

With one of the above conventional art in which 
the system is constituted by connecting each process 
input /output unit independently to each of the three 

10 processor units in a redundant structure, even if a 
single input sensor is sufficient for an input signal, 
such as an amplifier is required for inputting the 
signal into the three process input units, and further 
the output signals outputted from the three process 

15 output units require at the outside thereof a circuit 
which selects one of the output signals for the plant 
which arises problems with regard to cost and size 
thereof. Further, when all of the signals inputted 
/outputted to and from the process control unit are 

20 connected to the process input/output unit in this 
scheme, these circuits become huge, thereby, the 
failure rate rises as well as number of parts 
increases which is undesirable from a view point of 
maintenance. Further, with the device disclosed in 

25 JP-A-5-241606 the hardware thereof can be reduced but 
the amount thereof insubstantial and the substantial 
advantage thereof is insignificant. 
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Still further^ with the above conventional art in 
which inputting/outputting of process variables and 
monitoring thereof in a multiplexed control system are 
performed through a separate provision of a 
5 microcomputer exclusive for the monitoring and an 
input/output hard interface unit, it requires a 
transmission time which increases a response time and 
arises a problem of necessitating a long control time^ 
Still further, with the conventional art 

10 disclosed in JP-A-08-106301 since the processor units 
and the process input /output unit are connected via 
triplexed lines as well as a circuit for connection 
change-over is provided for each of the process 
input/output units, the circuit thereof complexes in 

15 comparison with a usual process input/output unit and 
a problem arises that a significant cost increase can 
not be avoided in order to keep reliability when using 
the hard wire circuits. 

The present invention is carried out for 

20 countermeasuring the above problems and a first object 
of the present invention is to provide a multiplexing 
control system which shows fast response 
characteristic and high reliability. 

Further, a second object of the present invention 

25 is to provide a low cost, high reliability and small 
sized multiplexing control system and a multiplexing 
method therefor. 
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In the present invention which achieves the first 
object^ a common process input/output unit is provided 
for distributing respective plural process signals 
detected by plural sensors corresponding to 
5 multiplexing number^ which are to detect the same 
state variable of a process, to digital controllers. 

More specifically, regardless to the number of 
microcomputers through the use of comparable number of 
interface broads as the number of microcomputers in a 

10 single input /output hard interface uftit, the input 
/output hard interface unit can be used in common, 
thereby, inputting/outputting can be performed in 
parallel without using the transmission which 
drastically shortens the control time. 

15 Through thus constituting, no process signal 

transmission time is required, thereby, a multiplexing 
control having a fast response characteristic and a 
high reliability can be achieved. 

According to the present invention which achieves 

20 the second object of the present invention, the 
redundant structure in the process input/output units 
into and from which the concerned process signals are 
inputted and outputted is varied depending on the 
types of the process signals, further, the system is 

25 constituted in such a manner that the signals of the 
input/output units having a low redundancy are 
inputted and outputted via an input/output unit having 
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a high redundancy. 

Further, one process input /output unit which 
inputs and outputs process signals with a plant is 
provided for every process signal, the process input 
5 /output unit for the process signal of a "high" 
importance is triplexed as well as a process 
controller having a processing function is provided 
for each of the triplexed input/output units, the 
process input /output unit for the process signal of an 

10 "intermediate" importance is diplexed, the process 
input/output unit for the process signal of a "low" 
importance is monoplexed as well as the output of the 
respective process signals of the diplexed input 
/output unit and the monoplexed input /output unit is 

15 constituted to be processed by either of the process 
controllers • 

Further, by designating one of the triplexed 
process controller as having a master right the system 
is cons-tl-tuted in such a manner that the output 

20 control of the diplexed input /output unit and the 
monoplexed input/output unit is performed by the unit 
having the master right. 

Still further, the object of the present 
invention can be achieved in such a manner that one 

25 process input /output unit which inputs and outputs the 
process signals with a plant is provided for every 
process signal and the redundancy structure of the 
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input/output units for inputting and outputting 
process signals are either triplexed, diplexed or 
monoplexed depending on importance of the process 
signals. Namely, not triplexing all of the units 
5 constituting the plant control device only the units 
for the process signals having high importance are 
triplexed and other units are either diplexed or 
monoplexed, thereby, the amount of hardware can be 
reduced and the size and cost reduction tof the device 
10 can be realized without damaging reliability. 

Further, since the system is constituted so that 
the process controller having the master right 
supports all of the units, a further cost reduction 
thereof can be realized. 

15 

BRIEF DESCRIPTION OF DRAWINGS 

Fig. 1 is a constitutional diagram showing an 
embodiment according to the first invention; 

Fig. 2 is an exemplary detailed 'constitutional 
20 diagram of a major portion of the embodiment according 
to the first invention; 

Fig, 3 is a view for explaining an operation of 
the first invention; 

Fig. 4 is a view for explaining an operation of 
25 the first invention; 

Fig. 5 is a view for explaining an operation of 
the first invention; 
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Fig. 6 is a view for explaining an operation of 
the first invention; 

Fig. 7 is a view for explaining an operation of 
the first invention; 
5 Fig. 8 is a flowchart for explaining an operation 

of the first invention; 

Fig. 9 is a flowchart for explaining an operation 
of the first invention; 

Fig. 10 is a flowchart for explaining an 
10 operation of the first invention; 

Fig. 11 is a constitutional diagrctm of a plant 
control system representing an embodiment according to 
the second invention; 

Fig. 12 is a constitutional diagram of a plant 
.15 control system representing another embodiment 
according to the second invention; 

Fig. 13 is a constitutional diagram of a plant 
control system representing still another embodiment 
according to the second invention; 
20 Fig. 14 is a view for explaining data matching 

method of output data between triplexed process 
controllers ; 

Fig, 15 is a diagram showing a detailed 
connection structure between a monoplexed PI/O unit 
25 and a triplexed CPU unit; 

Fig. 16 is a view for explaining a data input 
method and a mutual monitoring method; 
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Fig. 17 is a diagram showing an input and output 
list (table) of PI/0; 

Fig. 18 is a flowchart showing a PI/O initial 
processing sequence at the time of a system start; and 
5 Fig. 19 is a flowchart showing a processing 

sequence for a PI/O input /output method. 

PREFERRED EMBODIMENTS FOR CARRYING OUT THE 
INVENTION 

10 Hereinbelow, an embodiment according to the first 

invention will be explained. 

Figs. 1 and 2 show a structure of a multiplexed 
control system (through triplexing microcomputers) 
representing an embodiment according to the present 

15 invention. 

The multiplexed control system as shown in Fig. 1 
is constituted by three microcomputers (lA-lC) and an 
input/output hard interface 2 provided in common for 
the three microcomputers, and the input/output hard 
20 interface 2 is inputted of process signals from three 
sensors (4A-4C) and distributes the process signals to 
the microcomputers (lA-lC) via interface boards (3A- 
3C). 

Fig. 2 shows the detailed structure of the 
25 multiplexed control system as shown in Fig. 1, lA, IB 
and IC are microcomputers, 5A, SB and 5C are judgement 
units, 6A, 6B and 6C are memories, 7A, 7B and 7C are 
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signal conversion units, 101 is an input/output 
processing unit and 102 is an output processing unit, 
and the system performs the following operations. 
1) Data Output 

5 As shown in Figs. 3 and 4, the microcomputer 

(master) lA outputs a master signal to the judgement 
unit 5A so as to set the connected interface board as 
a master interface board (an output permission command 
for the interface board). When judgement unit 5A 

10 recognizes as the master, the unit outputs data output 
permission signal in the signal conversion unit 7A. 

The microcomputer (master) lA performs writing 
into the output processing unit 102 via the signal 
conversion unit 7A and the output processing unit 102 

15 performs data output to outside. In contrast, the 
microcomputers (slaves) IB and IC output slave signals 
to the judgement units 5B and 5C so as to set the 
connected interface boards as slave interface boards 
(output prohibition commands for the interface 

20 boards). When the judgement units 5B and 5C 
recognizes as the slaves, the units output data output 
prohibition signals in the signal conversion units 7B 
and 7C. 

Although the microcomputers (slaves) IB and IC 
25 perform writing into the signal conversion units 7B 
and 7C, the signal conversion units do not perform 
outputting because of the output prohibition but 



11 

perform only response to the microcomputers IB and IC. 

The data output processing is performed through 
steps S1-S3 in Fig, 8. 

Namely^ output data are inputted from respective 
5 processing units of the microcomputers (lA-lC) to the 
respective signal conversion units and the master 
/slave signals from other microcomputers are inputted 
to the judgement unit (SI). Subsequently, it is 
recognized whether or not the \ respective 

10 microcomputers (lA-lC) are master (S2)% and if it is 
determined as the master, the output data from the 
signal conversion unit is inputted to the output 
processing unit and the same is outputted from the 
output processing unit to the outside. 

15 2) Data Input 

As shown in Figs. 5 and 6, the input processing 
unit 101 inputs data to the respective interface 
boards 3A, 3B and SC. Wherein, the microcomputer 
(master) lA outputs a master signal to the judgement 

20 unit 5 A so as to set the connected interface board as 
the master interface board (an input permission 
command for the interface board) . 

When the judgement unit 5 A recognizes as the 
master, the unit outputs the data input permission 

25 signal in the signal conversion unit 7A. Thereby, the 
microcomputer (master) lA performs inputting from an 
input processing unit 12 via the signal conversion 
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unit 7A. 

In contrast thereto, the microcomputers (slaves) 
IB and IC output the slave signals to the judgement 
units 5B and 5C so as to set the connected interface 
5 board as the slave interface boards (input prohibition 
commands for the interface boards). When the 
judgement units 5B and 5C recognize as the slaves, the 
data are written in the memories 6B and 6C so as to 
output the data input prohibition signals for the 

10 signal conversion units and the microcomputers 
(slaves) IB and IC perform inputting from the memories 
6B and 6C. Thereby, the microcomputers (slaves) IB 
and IC are permitted to be inputted of the same data 
as the microcomputer (master) lA. 

15 The data input processing is performed through 

steps S5-S8 in Fig. 9. 

Namely, the respective microcomputers (lA-lC) 
input data into the input processing units, output the 
same to the signal conversion units and input the 

20 master/slave signal from other microcomputers to the 
judgement unit (S5). Subsequently, the respective 
microcomputers (lA-lC) recognize whether or not the 
same is the master (S6), and if it is determined as 
the master, the input data from the signal conversion 

25 unit is inputted to the processing unit in the 
microcomputer (S7). If it is determined as not the 
master, the input data from the signal conversion unit 
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are Inputted to the memory in the input /output hard 
interface and the same are inputted from the memory to 
the processing unit in the microcomputer (S8). 
3) Master /Slave Change-Over 
5 The microcomputers lA, IB and IC for the 

multiplexing control device include a priority 
selection function for the interface boards. With 
regard to the change-over of priority selection for 
the interface boards priority is determined in advance 

10 as shown in Fig. 7(a) and the change-over of the 
master/slave is performed accordingly. Each of the 
interface boards always monitors own microcomputer and 
the state of the other interface boards (normal 
/abnormal and master/slave) . 

15 At the time of master failure, the master is 

change-over to a microcomputer having high priority 
among other normal systems, but at the time of slave 
failure and restoration no master change^rover is 
performed. Further, when the own microcomputer fails, 

20 the function thereof is stopped. For example, when 
the system is controlled through a triplex system as 
shown in Fig. 7, and when A system fails, the master 
is changed over to B system and even if the A system 
is restored thereafter, the master rechange-over never 

25 occurs. Further, if B system fails, A system having 
high priority 6U[nong other normal systems is selected 
as the master. Then, the A system fails, C system of 
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only normal system is selected as the master. Through 
the use of such master/slave change-over selection 
function the output /input control is performed. 

The master/slave change-over processing is 
5 performed through step S10-S19 in Fig. 10. 

Namely^ the own system microcomputer inputs and 
outputs the master/slave signal with other 
microcomputers (SIO). Subsequently^ it is judged 
whether the own system microcomputer is normal (Sll). 

10 In case of not normal^ the signal conversion unit 

in the own system is stopped (S13). 

In case of normal^ it is judged whether the own 
system is master (S14) and if it is determined as 
master, data input /output permission signal is 

15 inputted from the judgement unit in the microcomputer 
to the conversion unit (S15). If it is determined as 
not master, it is judged whether a signal comes from 
the master (S16) and if it is determined that the 
signal has come, the data input/output prohibition 

20 signal is inputted from the judgement unit in the 
microcomputer to the signal conversion unit (S17). If 
the signal has not come, it is judged whether the own 
system is the highest priority among the normal 
microcomputers, and if it is determined the highest, 

25 the master is selected for the own system (S19). If 
not the highest, the data input /output prohibition 
signal is inputted from the judgement unit in the 
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microcomputer to the signal conversion unit (S17). 
4) Countermeasure at the Time of Failure 
When a microcomputer and an interface board fail, 
since only the failed system can be removed, thereby, 
5 the device can be restored without stopping the same. 

Now, embodiments according to the second 
invention will be explained. 

Fig. 11 is a system constitutional diagram of a 
plant control device representing an embodiment 
10 thereof. The present embodiment, is characterized in 
that respective triplexed process input/output units 
(PI/O) 13, 23 and 33 and respective digital control 
units (CPU, sometimes also called as process 
controller) 11, 21 and 31 having three processing 
15 capacities constituted in a triplex system are 
respectively unified as CPU units, respective process 
input /output units 51 and 61 in a diplex system and 
one 41 in a monoplex system are connected respectively 
to the three process controllers 11, 21 and 31 
20 constituting the triplex system. On the other hand, 
the respective triplexed CPUs 11, 21 and 31 are 
connected to a network 104 via network connection use 
boards (NCP) 12, 22 and 32. 

To the respective triplexed process controllers 
25 11, 21 and 31 a variety of sensors and operation 
terminals provided for plant machines and apparatus 
71-76 are connected, and from which important 
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operation information of the plants, for example, 
signals of measured values such as turbine rpm and gas 
turbine exhaust gas temperature are taken in, since 
these signals are very important signals for the plant 
5 operation, the plant machines and apparatus are also 
triplexed as (71, 73, 75) and (72, 74, 76). 

Further, the CPU 11, Pl/O 13 and the plant 
machines and apparatus 71 and 72 are connected in one 
to one relationship, the CPU 21, PI/O 23 and the plant 

10 machines and apparatus 73 and 74 are connected in one 
to one relationship and the CPU 31, PI/O 33 and the 
plant machines and apparatus 75 and 76 are connected 
in one to one relationship. 

An input signal from a plant is taken in 

15 independently into the process controller via the 
respective PI/O and an output signal is likely 
outputted independently via the respective PI/O. 
Thereby, reliability of the signals is enhanced . - 

The plant machines and apparatus 77 and 78 deal 

20 such as monitoring signal and an output signal to a 
lamp indication system. The PI/O 41 connected to 
these machines and apparatus is a monoplexed PI/O 
unit, and triplexed process controllers 11, 21 and 31 
are connected with the monoplexed PI/O unit through 

25 cables 81, 82 and 83 connecting IF boards 15, 25 and 
35 packaged at the CPU unit side with UIF boards 42, 
43 and 44 packaged at the PI/O unit side. 



1 



17 

The input signal from the plant tnachine and 
apparatus 77 is taken in the respective process 
controllers 11, 12 and 13 via the monoplexed process 
input/output unit (PI/O) 41, and as the output signal 
5 to the plant machine and apparatus an output data of a 
process controller having a master right among the 
triplex systems (A, B and C systems) is outputted with 
priority, of which details will be explained in 
connection with Fig. 15. 

10 A plant machine and apparatus de'lils such as an 

important monitoring signal for control operation of 
such as a plant and a plant machine and apparatus 
which is required to be inputted continuously even 
during exchange work due to failure of a process 

15 input/output unit and an output signal for a control 
operation of which error is not permitted. To the 
machine and apparatus 79 the diplexed PI/Os 51 and 61 
are connected. The diplexed PI/Os 51 and 61 are 
connected with the triplexed process controllers 11, 

20 21 and 31 through cables 84, 85, 86, 87, 88 and 89 
connecting IF boards 14, 24, 35 packaged at the CPU 
unit side with UIF boards 52, 53, 54, 62, 63, 64 
packaged at the PI/O unit side. 

The input signal from the plant machine and 

25 apparatus is taken in the respective process 
controllers 11, 21 and 31 via the PI/Os 51 and 61. As 
the output signal to the plant machine and apparatus 
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79 output data of a process controller having master 
right is outputted with priority from the PI/Os 51 and 
61 (of which details will be explained in connection 
with Fig. 15). In this instance, through provision of 
5 a change-over switch 90 at the outside of the machine 
and apparatus, a signal either from PI/O 51 or 61 is 
outputted to the plant machine and apparatus. 

Fig. 12 is a constitutional diagram of a plant 
control system representing another enibodiment. In 

10 the system constitution according to the present 
embodiment the triplexed process input/output units 
13, 23 and 33 and three process controllers 
constituting a triplex system are connected in one to 
one relationship, and the diplexed process input 

15 /output units 51 and 61 and the monoplexed process 
input /output unit 41 and the three process controllers 
11, 21 and 31 constituting a triplex system are 
respectively connected in series. Since the 
structures of the triplexed process controllers, the 

20 process input/output units and other units for IF are 
the same as those in Fig. 11 embodiment, the 
explanation thereof is omitted. 

One PI/O 51 in a diplex system connected to. the 
plant machine and apparatus and the triplexed process 

25 controllers 13, 23 and 33 are connected through cables 
81, 82 and 83 connecting IF boards^ 15, 25 and 35 
packaged at the CPU unit side with UIF boards 52, 53 
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and 54 packaged at the PI/O unit side, and the UIF 
boards 62, 63 and 64 at the other PI/O 61 is connected 
to the UIF boards 52, 53 and 54 of the PI/O 51 at the 
one side via the cables 94, 95 and 96. The PI/O 61 is 
5 coupled to the side of the triplexed CPU units via the 
respective UIF boards of the PI/O 51. 

The input signal from the plant machine and 
apparatus 79 is taken in the respective process 
controllers 11, 21 and 31 via the PI/Os ^1 and 61, and 

10 as the output signal the output dataT of a process 
controller having master right is outputted with 
priority to the machine and apparatus 79 via the PI/Os 
51 and 61. Likely, in this instance through the 
provision of the change-over switch 90, an output 

15 signal either from PI/O 51 or 61 is outputted to the 
plant machine and apparatus. 

The PI/O 41 is provided with the monoplexed plant 
machines and apparatus 77 and 78, and the UIF boards 
42, 43 and 44 are connected to the UIP boards 62, 63 

20 and 64 of the PI/O 61 via the cables 91, 92 and 93. 
Namely, the PI/O 41 is coupled to the side of 
triplexed CPU units via respective UIF boards of the 
PI/Os 61 and 51 inserted in series. The input signal 
from a plant is taken in the respective process 

25 controllers via the PI/O 41, and as the output signal 
like Fig. 11 embodiment the output data of a process 
controller having master right is outputted with 
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priority. 

In the present embodiment, since the respective 
PI/Os 41, 51 and 61 are connected in series and are 
connected to the respective process controllers in a 

5 triplex system, it is sufficient if one piece of IF 
board is packaged for each of the three CPU units (in 
Fig. 11 embodiment two pieces of IF boards are 
packaged for each of the CPU units), thereby, an 
advantage of reducing amount of hardware can be 

10 obtained. 

Fig. 13 is a constitutional diagram of a plant 
control system representing still another embodiment. 
In the present embodiment, each of the CPU units in a 
triplex system is constituted by a CPU 11 (21, 31), a 

15 network connection use board (NCP) 12 (22, 32) and an 
IF 15 (25, 35), and no PI/O is provided in the CPU 
units. Each of PI/Os 100, 110 and 120 which 
constitute process input/output units in a triplex 
system is provided with three UIF boards (101, 102, 

20 103), (111, 112, 113) and (121, 122, 123). The plant 
machines and apparatus 71 and 72 are connected to the 
PI/O 100 for A system, the plant machines and 
apparatus 73 and 74 are connected to the PI/O 110 for 
B system and the plant machines and apparatus 75 and 

25 76 are connected to the PI/O 120 for C system. 

The UIF 121 of the Pl/O 120, the UIF 111 of the 
PI/O 110, the UIF 101 of the PI/O 100 and the IF 15 of 
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the CPU unit 11 are respectively connected in series 
through the cables 133, 130 and 81, the UIF 122 of the 
PI/0 120, the UIF 112 of the PI/O 110, the UIF 102 of 
the PI/O 100 and the IF 25 of the CPU unit 21 are 
5 connected in series through the cables 134, 131 and 
82, and the UIF 123 of the PI/O 120, the UIF 113 of 
the PI/O 110, the 103 of the PI/O 100 and the IF 35 of 
the CPU unit 31 are connected in series through the 
cables 135, 132 and 83. 

10 The input signals from the plant machines and 

apparatus 71-76 are independently taken in the process 
controllers for respective systems via the 
corresponding PI/O, and the output signals are 
independently outputted in the like manner via the 

15 corresponding PI/O. Thereby, reliability of the 
signals is enhanced. 

The plant machines and apparatus 77 and 78 are 
connected to the PI/O 41 in a monoplex system. 
Further, the plant machine and apparatus 79 is 

20 connected to the PI/Os 51 and 61 in a diplex system, 
the UIF boards of the respective PI/O units are 
connected in series like Fig. 12 embodiment, and 
further, in the present embodiment the respective UIF 
boards 52, 53 and 54 of the PI/O 51 are connected to 

25 the UIF boards 121, 122 and 123 of the PI/O 120 
through the cables 136, 137 and 138. 

Namely, in the present embodiment all of the 
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triplexed PI/Os 100, 110 and 120, the monoplexed PI/O 
41 and the diplexed PI/Os 51 and 61 are connected in 
series, and are connected to the respective triplexed 
process controllers 11, 21 and 31. 
5 Likely, in the present embodiment the input 

signal from the plant machine and apparatus 77 is 
taken in the respective process controllers via the 
PI/O 41 and as the output signal to the machine and 
apparatus the output data from a process controller 

10 having master right is outputted with priority. 
Further, the input signal from the plant machine and 
apparatus 79 is taken in respective process 
controllers via the PI/Os 51 and 61 as well as via the 
respective UIF boards of the PI/Os 120, 110 and 100, 

15 and as the output signal to the machine and apparatus 
79 the output data of a process controller having 
master right is outputted with priority from either 
PI/O 51 or 61 selected by the change-over switch 90. 

Fig. 14 is a diagram for explaining the data 

20 matching method of the output data between process 
controllers in a triplex system under the above 
explained system structure. The process controllers 
11, 21 and 31 in a triplex system are connected to a 
network 1 through the respective network connection 

25 use boards (NCP) 12, 22 and 32. A soft logic 201 is 
incorporated within each of the respective process 
controllers 11, 21 and 31. An example of the soft 
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logic 201 shown in Fig. 14 is one incorporated in the 
process controller 11 for A system, however, the 
content of the soft logic incorporated in the process 
controllers for B and C systems is the same as shown. 
5 A calculation result (in this example valve 

opening degree) by a PI calculator 202 in the soft 
logic 201 is transmitted to B and C systems via the 
network 1 (which is indicated by numeral 203). 
Likely, respective calculation results in B and C 

10 systems are also tremsmitted via the network 1 and are 
received by A system (206, 207). Respective opening 
degrees in A, B and C systems are inputted to an 
average value calculation means 204 which calculates 
the average value thereof and outputs the same as an 

15 opening degree command to the PI/O of the own system 
under control. Further, in this example, the average 
value is calculated, however, the command 208 can be 
generated according to another logic of calculation 
processing such as majority logic and median logic. 

20 Thereby, an output signal which is free from erroneous 
operation and erroneous non-operation can be obtained. 

Fig. 15 is a diagram showing details of the 
connection structure between the monoplexed PI/O 41 
and the triplexed CPU units as shown in Figs. 11 and 

25 12. Each of the triplexed CPU units has the same 
structure and the process controller 11 (21, 31) is 
connected to the NCP 12 (22, 33), PI/O 13 (23, 33) and 
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the IF board 15 (25, 35) via a bus 16 (26, 36). 

A common process input /output unit 41 for the 
triplexed process controllers 11, 21 and 31 is 
connected to UIF boards 42, 43 and 44 via a bus 45 and 
5 the UIF boards 42, 43 and 44 are connected to the IF 
boards 15, 25 and 35 through the cables 81, 82 and 83. 

The specification for the buses 16, 26 and 36 is 
as same as that for the bus 45, therefore, the 
specification for the PI/Os 13, 23 and 33 becomes same 

10 as that for the PI/O 41. Such is true with regard to 
the diplexed PI/O units. According to the present 
embodiment, the specification for the PI/O (process 
input/output unit) can be standardized which further 
contributes to the cost reduction. Further, the 

15 respective UlFs can also be connected with the bus 46 
which is used for information reception and 
transmission between the UIFs. 

Fig. 16 is. a diagrsim for explaining a data 
inputting method and a mutual monitoring method. As 

20 has been explained in connection with Fig. 15, in 
order to standardize the specification for the 
respective Pl/Os (process input/output units) the data 
input/output processing into the PI/O used in common 
by the triplexed process controllers is performed at 

25 the UIFs packaged in the unit for . the respective 
process controllers and the common process input 
/output unit. 
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Among the triplexed process controllers 11, 21 
and 31, a controller which outputs data to the . common 
process input/output unit is called as a controller 
having master right. In Fig. 16 embodiment it is 
5 assumed that the CPU 11 is the controller having 
master right. 

The CPU 11 performs the master setting at the UIF 
42. In this instance, it is informed through the bus 
46 as shown in Fig. 15 to the UIFs 43 and 44 that the 

10 CPU 11 is the master. The controller CPU 11 having 
master right takes in data from the PI/O 41 via the IF 
15 and the UIF 42. At this moment, the data input 
value is copied from the UIF 42 to the UIFs 43 and 44. 
The controller CPUs 21 and 31 with no master right 

15 read these copied data from the UIFs 43 and 44. 

The output data are outputted only from the 
controller CPU 11 having master right. Other than 
usual dat% inputting/outputting the controller CPU 11 
having master right writes an existence code through 

20 step 305 in a certain area 310 within UIF 42 connected 
to itself. 

Further, the CPU 11 reads back the existence code 
written by itself and confirms through step 306 
whether the same matches to the one written by itself. 
25 The existence code written through step 305 is copied 
in areas 311 and 312 on the UIFs 43 and 44 connected 
respectively to the controller CPUs 21 and 31 having 
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no master right, and the CPUs 21 and 31 respectively 
read the existence code and confirm soundness of the 
CPU 11 and the UIFs 42, 43 and 44 through steps 307 
and 308. 

5 Other than the above, between the CPUs 11, 21 and 

31 tracking of data via the network 1 is used and the 
respective controllers also monitor whether the data 
tracking is successful through steps 301 and 302. 
Further, in Fig. 14 embodiment the data tracking is 

10 also performed. 

Fig. 17 is a diagram showing an example of PI/O 
input/output point list (table). Row 501 represents 
serial No. of input/output points, row 502 represents 
signal name of the input /output points, low 503 

15 represents redundancy of the input /output units 
depending on the importance of signals, row 504 
represents classification of the signals and rows 505, 
506 and 507 represent packaging position of PI/O which 
performs inputting/outputting of the concerned signal. 

20 The signal bearing serial No. 1 is an input value 

of gas turbine rpm. Since the importance of the 
signal is high, the input /output unit is formed in a 
triplex system and the row 503 is set at "3". With 
regard to the packaging position thereof slot 5 in 

25 unit 1 is set for the respective controllers in a 
triplex system. When setting is performed as above, 
the respective process controllers take in gas turbine 
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rpm from own Pl/o packaged at slot 5 in unit 1. 

The signal bearing serial No. 3 represents a 
signal showing abnormality of a memory back-up use 
battery in the controller and since the importance 
5 thereof is low, the redundancy of the input/output 
unit thereof is determined as monoplex. Thus, "1" is 
set at the row 503. Packaging position of PI/O is set 
at slot 1 in unit 2. The present signal is inputted 
under the control of the controller having master 

10 right through steps which will be explained in 
connection with Figs. 18 and 19. 

The signal bearing serial No. 4 represents a 
signal indicating a fully closed state of the exhaust 
fan and the redundancy of the input/output unit is set 

15 as diplex. Therefore, the row 503 is set at "2". The 
packaging position of PI/O is set at slot 5 in unit 3 
and at slot 5 in unit 4. When the packaging position 
is set as above, under the control of the controller 
having master right, an input is usually inputted from 

20 the slot 5 in unit 3, but if there is any abnormality 
at the card, the inputting is performed from the card 
of slot 5 in unit 4. 

Through the use of the input/output point list as 
has been explained, only by setting the redundancy 

25 structure and the packaging structure for every 
signals, the redundancy structure of the input/output 
units can be simply and surely determined. 
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Fig. 18 is a flowchart showing PI/O initial 
processing steps when starting up the system. When 
starting up the system^ it is necessary to perform the 
initial processing for the respective PI/Os. In the 
5 present embodiment^ since the redundancy of the 
input/output units varies depending on importance of 
every signal, it is necessary to change a process 
controller which performs the above initial processing 
for every signal, thus the initial . processing is 
10 performed according to the flowchart as shown in Fig. 
18. 

Therefore, at first it is judged whether the 
concerned PI/O is independent at step 410. When the 
concerned PI/O is a PI/O in a triplex system, in that 

15 YES, the process advances to step 411 wherein the 
respective process controllers perform the initial 
processing for respective PI/O under its control. 
When the process signal is inputted/outputted via 
diplexed or monoplexed process input /output units, 

20 namely the concerned PI/O is not an independent PI/O, 
the judgement result NO is given at step 410, and the 
process advances to step 401. 

The steps below the step 401 are the initial 
processing for the diplexed and monoplexed PI/Os and 

25 the process controller having master right performs 
the initial processing for the respective PI/Os 
through the following steps. 
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At step 401, the respective process controllers 
in a triplex system, after being started, each judges 
whether one of other systems has already acquired 
master right. If it is determined that one of the 
5 other systems has acquired the master right, the 
judgement result YES is given at step 401 and the 
starting-up is completed without acquiring the master 
right. 

When there is no controller having master right 

10 at the time of starting-up (in that the judgement 
result at step 401 is NO), it is judged at the 
subsequent step 402 whether the own system is A 
system, B system or C system, and if it is determined 
that the own system is A system, the process skips to 

15 step 406 wherein the own system is started as the 
master as well as the initial processing is performed 
for the concerned PI/O. 

When the judgement at step 402 shows that the own 
system is B system, the process advances to step 403 

20 and waits there for 3 cycles as it is, and when the 
judgement shows that the own system is C system, the 
process advances to step 404 and waits there for 6 
cycles as it is, and thereafter advances to step 405. 
At step 405 it is confirmed whether there is a system 

25 which has acquired the master right, and if it is 
determined some other system has already acquired the 
master right (in that the judgement result is YES), 
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the starting-up thereof is completed without acc[uiring 
the master right. 

If it is determined that no system has accjuired 
the master right (in that the judgement result at step 
5 405 is NO), the process advances to step 406 and 
starting-up of the own system as the master as well as 
the initial processing is performed for the concerned 
PI/O. Namely, a system which starts up first acquires 
the master right, and when the starting-up occurs at 

10 the same time, the master right is taken by A system 
with priority so as to prevent conflict. 

Fig. 19 is a flowchart showing input /output steps 
in IP/O. In the input /output processing in PI/O, at 
first the redundancy structure of concerned card 

15 (PI/O) is investigated with reference to the 
redundancy structure in the redundancy structure 
setting table (input /output point list) with regard to 
PI/O as explained in connection with Fig. 17 (^tep 
430). 

20 When the concerned card is in a triplex system, 

the process advances to step 432 and the input /output 
processing is performed for the concerned card to 
complete the process. 

When it is determined that the concerned card is 

25 in a diplex system based on the judgement result at 
step 430, the process advances to step 433 wherein it 
is judged whether the own system has the master right. 
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If it is determined that the system has no master 
right (in that the judgement result is N), no 
processing is performed because of no accessing right 
to the concerned card and the process advances to the 
5 input/output processing for the subsequent card. 

When it is judged at step 433 that the system has 
the master right (Y), the process advances to the 
subsequent step 434 wherein it is judged whether the 
concerned card is an input card. When the concerned 

10 card is an output card, the judgement result turns out 
as N and the process advances to the subsequent step 
436 and the data is outputted to the PI/Os in a diplex 
system in A/B both systems. When the concerned card 
is an input card, the judgement result at step 434 

15 turns out as Y, the process advances to the subsequent 
step 435 wherein it is checked whether the PI/O in A 
system is normal. When the PI/O in A system is normal 
(in that judgement result in step 43.5 is Y), the 
process advances to step 437 wherein input processing 

20 from the PI/O in A system is performed. When the PI/O 
in A system is abnormal (in that the judgement result 
at step 435 is N), the process advances to step 438 
wherein the input processing from the PI/O in B system 
is performed. 

25 When it is determined based on the judgement 

result at step 430 that the concerned card is a single 
system (monoplex system) , subsequently, it is judged 
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whether the own system has the master right (step 
439). When it turns out that the system has no master 
right (judgement result is N), no processing is 
performed because of no accessing right to the 
5 concerned card and the process advances to input 
/output processing for the subsequent card. When the 
system has the master right the process advances from 
to step 440 wherein the input/output processing is 
performed for the concerned card and then the process 

10 advances to the input/output processing for the 
subsequent card. 

As has been explained above, the process 
controller having the master right performs data 
input /output for the PI/Os in a diplex system and in a 

15 monoplex system. 

Further, in the above explained respective 
embodiments, a common structure is used for triplexed, 
diplexed and monoplexed process input/output units, 
the inputting/outputting for the process input/output 

20 units in a triplex system is performed by the 
respective process controllers, the outputting for the 
process input/output units in a diplex system and in a 
monoplex system is performed by one process controller 
having the master right eimong the process controllers 

25 in a triplex system, further, the inputting is 
performed at the input timing of the process 
controller having the master right and the remaining 
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process controllers take in the input value after 
being copied^ the present system is constituted to 
support all of the constitution by the single 
controller, thereby, the cost reduction of the system 
5 can be realized. 

Further, the output signals of the process 
input /output units in a diplex system and in a 
monoplex system are processed in the respective 
calculation processing units in the process 

10 controllers in a triplex system, the calculation 
result of the respective calculation processing units 
is further processed through majority logic, median 
logic or averaging logic to output the thus processed 
result, thereby, a sudden change of output value can 

15 be prevented, even when an abnormality occurs in the 
process controller having the master right or even 
when the master right is changed-over to another 
process -qdntroller in case when a manual handling from 
the outside is required. 

20 Still further, the process controller having the 

master right writes the existence code periodically 
into the process input/output unit in a diplex system 
and in a monoplex system, reads back the existence 
code and compares the same with the written existence 

25 code, thereby, the soundness of the input /output units 
can be confirmed. Further, the process controllers 
having no master right read out the existence code 
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written by the process controller having the master 
right from the process input /output unit^ thereby^ the 
soundness of the process controller having the master 
right and the process input/output unit can be 
5 confirmed. 

Still further, when abnormality of the existence 
code is monitored, the process controller having the 
master right abandons the master right, if other 
systems are normal, further, when there is an 

10 abnormality in the copying function of the process 
input or the monitoring function of the existence code 
which is to be transferred from the process controller 
having the master right, the process controllers 
having no master right can place own system in an 

15 exclusion mode so as not to acquire the master right. 

Still further, when a state continues in which 
other system than the process controller which is 
required to acquire the master right among the process 
controllers in a triplex system keeps the master 

20 right, the process controller which is required to 
acquire the master right can be designed to have a 
function which causes the process controller still 
keeping the master right to abandon the master right. 
Still further, since respective redundancy 

25 structures can be set for the respective input/output 
use card, units having different redundancy structures 
can be included within the system as well as input 
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/output cards having different redundancy structures 
can also be included within a same unit. 

According to the hitherto explained embodiments^ 
the process signals to be inputted/outputted are 
5 classified into three types depending on importance 
with regard to process control and the system is 
constituted in such a manner that the most important 
signals are inputted/outputted through the triplexed 
process input/output unit^ the nextly important 

10 signals are inputted/outputted through the diplexed 
process input /output unit and the other signals are 
inputted/outputted through the monoplexed process 
input/output unit, thereby, the size and cost 
reduction of the system can be achieved in comparison 

15 with a case wherein all of the input/output units are 
triplexed. 

In this instance, as the most important signals 
monitoring input, signals necessary for protection and 
safety of plants and plant machines and apparatus such 

20 as turbine rpm and gas turbine exhaust gas temperature 
in a thermal power generation plant rpm and flow rate 
of a recirculation pump in a nuclear power generation 
plant, and operation and control command output 
signals with which no erroneous operation and the no 

25 erroneous non operation are permitted/ are included, 
as the nextly important signal such as important 
monitoring signals with regard to control and 
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operation of the plant and the plant machines and 
apparatus which are required to be continuously 
inputted even during exchange work of the process 
input /output units due to failure thereof and control 
5 and operation output signals with which no erroneous 
operation is permitted ^ are included^ and as the other 
signals monitoring signals of which inputting can be 
replaced by other signals, signals for recording such^ 
as in a journal and output signal to lamps and 

10 indicators of which temporarily interruption during 
such as exchange work of the process input /output unit 
due to failure thereof does not affect continuing 
operation of the plant, are included, thereby, the 
size and cost reduction of the system can be achieved 

15 while keeping the reliability of the plant control 
device high. 

When varying the redundancy structure depending 
on importance of the signals, other than the triplexed 
process input /output units in whitfh the process 

20 input /output units are independently connected to the 
respective three processor units in a redundancy 
structure, through connecting the diplexed process 
input /output units and the monoplexed process input 
/output unit to all of the three processor units, a 

25 single processor unit is permitted to control all of 
the input/output units, thereby, further cost 
reduction of the system can be realized. 
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Still further^ for the purpose of simplifying the 
connection between the process input /output units and 
the processor units ^ when connecting the processor 
units with the process input/output units ^ if the 
5 processor units and the plural process input/output 
units are connected in series and the redundancy 
structure of the process input/output units is 
designed in the connection^ a further size reduction 
of the system can be realized. In such instance^ it 

10 is also possible to connect plural process input/ 
output units in series for every combination of one 
processor unit and a process control device having the 
same redundancy. 

The data inputting /outputting for the triplexed 

15 input/output units is respectively performed by the 
triplexed and asynchronously operating processor 
units ^ however^ the system is constituted so that the 
data outputting through the diplexed or monoplexed 
process input /output units is to be performed by one 

20 of the processor units ^ a possible accessing conflict 
by the triplexed processor units can be avoided. 

In order to vary redundancy of the input /output 
units depending on the importance of the signals it is 
necessary to discriminate for every signal whether the 

25 access right be assigned to a representative processor 
unit or be assigned to respective processor units 
independently. Since a circuity which varies 
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redundancy of the input/output units depending on the 
importance of the signals and determines an accessing 
processor unit^ becomes very complex which causes to 
increase failure rate thereof, therefore, it is 
5 preferable to realize such circuit by a standard 
software operable in the processor unit and to include 
only a limited hardware circuit which absolutely 
prevents an erroneous output even when plural 
processor units make access due to such as 

1 0 cibnormali ty . 

Further, since the importance of the signals is 
known by the person setting the same and can not be 
recognized automatically by the software, the system 
is constituted in such a manner that by means of the 

15 input /output point list (table) redundancy structures 
are set for every signal and the allocating positions 
of the input /output units therefor are set, thereby, 
the redundancy setting for every signal can be 
performed simply and accurately and an erroneous 

20 setting thereof can be prevented. 

As has been explained hitherto, the size 
reduction of the process input/output units and 
rationalization of such as amplifier circuits of 
signals and selection circuits thereof outside the 

25 process input/output units are enabled and amount of 
resources can be cut, thereby, the size of the device 
is reduced and simplified which improves the 
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maintenance interval and cost. 

Further, since the processor units and the plural 
process input /output units are designed to permit 
series connection, the redundancy structure of the 
5 process input/output units can be realized in the 
connection, and the connection between the process 
input/output units and the processor units can be 
simplified, further since the plural process input 
/output units are connected in series for every 

10 combination of one processor unit and process control 
devices having the same redundancy, even if a failure 
is caused at the connection between the process 
input /output units, no influence is effected to 
inputting /outputting of other important signals having 

15 further high redundancy. 

Further, since the judgement circuit with regard 
to accessing right for the input/output units having 
different redundancy is constituted by a software 
circuit, simplification of the hardware circuit can be 

20 realized, thereby, reliability of the system is 
enhanced and cost thereof can be cut. 

INDUSTRIAL FEASIBILITY 

According to the first invention, since signal 
25 transmission and reception between microcomputers is 
performed not through transmission lines but through 
buses, information matching speed can be improved in 
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comparison with the conventional information matching 
using the transmission lines ^ further through a common 
use of an input /output hard interface unit inputting/ 
outputting and monitoring of plant process variable 
5 can be performed by the single input /output hard 
interface unit^ thereby^ number of wires and the 
process input/output units can be reduced^ thus system 
scale can be limited and the maintenance area can be 
reduced which also improves maintenance property of 

10 the system. " 

According to the second invention^ since the 
inputting/outputting of signals necessary for 
continuous operation of the present plant is performed 
through continuing inputting/outputting to the 

15 redundancy process input/output units, amount of 
resources of process input/output units in a triplex 
system can be cut without reducing reliability of 
continuous plant operation, thereby, size and cost 
reduction and simplification of the process input/ 

20 output units can be realized which also improves 
maintenance property and reduces maintenance cost. 



